SonicWall SonicOS Post-Authentication Stack-Based Buffer Overflow Vulnerability Allowing Firewall Crash

Vulnerability

A post-authentication stack-based buffer overflow vulnerability has been identified in SonicWall SonicOS. This vulnerability allows remote attackers to crash the firewall. It affects several Gen6 and Gen7 hardware firewalls, as well as Gen7 NSv and Gen8 firewalls, on various platforms and versions.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, causing the firewall to crash.

Remediation

Administrators are advised to upgrade to SonicOS versions 6.5.5.2-28n, 7.3.2-7010, or 8.2.0-8009, depending on their firewall generation. Until these patches can be applied, it is recommended to disable HTTP/HTTPS-based firewall management and SSL-VPN access on all interfaces, restricting management access to SSH only.

Added: Apr 29, 2026, 5:38 PM
Updated: Apr 29, 2026, 5:38 PM

Vulnerability Rating

Custom Algorithm
spread
4.5
impact
2.5
exploitability
4.9
remediation
8.3
relevance
7.0
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.